@loxtep/sdk 0.7.7 → 0.7.10

package/CHANGELOG.md

@@ -6,6 +6,44 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.10] - 2026-07-23
+
+### Fixed
+
+- **`loxtep whoami`** parses the production `{ success, data: { user, organization } }`
+  envelope instead of expecting flat top-level fields (which showed `—` for email/org).
+
+### Added
+
+- **CLI integration test suite** — mock platform API, read-only and mutating command
+  tests, local lifecycle (`init` → `attach` → `generate` → `deploy`), and opt-in
+  staging smoke (`LOXTEP_CLI_SMOKE=1`).
+- **`parseCurrentUserResponse`** shared helper for session/whoami envelope parsing.
+- **`fetch_fn`** on CLI client creation; **`cliOptions`** injection on
+  `generate`, `deploy`, and `test` commands for integration tests.
+
+### Changed
+
+- **README and docs** rewritten for greenfield onboarding:
+  `login` → `init` → `attach` → `generate` before stream I/O or manual client config.
+- **`tsconfig.json`** excludes `**/__tests__/**` from the publish build.
+
+## [0.7.9] - 2026-07-23
+
+### Fixed
+
+- **Browser login** no longer hangs after printing success: the localhost callback
+  server now destroys keep-alive connections and closes immediately so the CLI
+  process exits as soon as tokens are saved.
+
+## [0.7.8] - 2026-07-23
+
+### Changed
+
+- **README and quick reference** use customer-facing API area names instead of
+  internal MCP facade terminology (`loxtep_session`, "MCP-aligned facades", etc.).
+  SDK paths (`client.build`, …) are unchanged.
+
 ## [0.7.7] - 2026-07-23
 
 ### Changed

package/README.md

@@ -1,55 +1,47 @@
 # Loxtep Node.js SDK
 
-Client for the Loxtep API. Since **v0.7.0**, the public surface mirrors the
-**10 hosted MCP tool facades** (no flat top-level namespaces like
-`client.workflows` or `client.data_products`).
+Client for the Loxtep API. `LoxtepClient` groups platform APIs under
+**namespaced areas** on the client:
 
-| MCP facade | SDK namespace | Examples |
+| Area | SDK namespace | Examples |
 | --- | --- | --- |
-| `loxtep_session` | `client.session` | `get_current_user()` |
-| `loxtep_connect` | `client.connect` | `.connectors.*`, `.templates.*` |
-| `loxtep_workspace` | `client.workspace` | `.projects.*`, `.instances.*` |
-| `loxtep_build` | `client.build` | `.workflows.*`, `.triggers.*`, `.data_products.*`, `.targets.*` |
-| `loxtep_define` | `client.define` | `.schemas.*`, `.quality.*`, `.domains.*`, … |
-| `loxtep_meaning` | `client.meaning` | `.thesaurus.*` |
-| `loxtep_review` | `client.review` | `.approvals.*`, `.improvements.*` |
-| `loxtep_query` | `client.query` | `.catalog.*`, `.discovery.*`, `.query()` |
-| `loxtep_observe` | `client.observe` | `.stream_config()`, `.open_reader()` |
-| `loxtep_context` | `client.context` | `.procedures.*`, `.activity.*`, … |
-
-**Stream I/O** uses top-level helpers (not nested under a facade):
+| Authentication | `client.session` | `get_current_user()` |
+| Connect | `client.connect` | `.connectors.*`, `.templates.*` |
+| Workspace | `client.workspace` | `.projects.*`, `.instances.*` |
+| Build & deploy | `client.build` | `.workflows.*`, `.triggers.*`, `.data_products.*`, `.targets.*` |
+| Governance | `client.define` | `.schemas.*`, `.quality.*`, `.domains.*`, … |
+| Semantics | `client.meaning` | `.thesaurus.*` |
+| Review | `client.review` | `.approvals.*`, `.improvements.*` |
+| Analytics | `client.query` | `.catalog.*`, `.discovery.*`, `.query()` |
+| Observe | `client.observe` | `.stream_config()`, `.open_reader()` |
+| Context | `client.context` | `.procedures.*`, `.activity.*`, … |
+
+**Stream I/O** uses top-level helpers on the client:
 `await client.get_writer('data-product-name')` and
-`await client.get_reader('data-product-name')`.
+`await client.get_reader('data-product-name')` — but only after that data
+product is **deployed** on your attached instance.
 
-Full mapping table: [`docs/sdk-mcp-mapping.md`](./docs/sdk-mcp-mapping.md).
-**Upgrading from 0.6.x:** replace `client.data_products` →
-`client.build.data_products` (CRUD/stream/replay) or `client.get_writer` /
-`client.get_reader` (recommended write/read path); `client.workflows` →
-`client.build.workflows`; etc.
-
-**Node.js 22+** is the supported runtime (`engines` in `package.json`). **Live**
+**Node.js 22+** is the supported runtime (`engines` in `package.json`). Live
 queue/flow writes use the **Loxtep stream** data plane; configure stream bus
 resources (`streams` on `LoxtepClient` and instance env from your stack) and AWS
 credentials for SigV4 on both REST and the bus.
 
 ## Ways to get started
 
-This SDK supports two developer workflows:
-
 | Path | Use case | Entry point |
 |------|----------|-------------|
-| **Programmatic** | Write/read events from application code (microservices, lambdas, scripts) | `LoxtepClient` → `get_writer` / `get_reader` |
-| **Code-first CLI** | Author workflows as TypeScript, test locally, deploy via CI | `loxtep init → attach → generate → test → deploy` |
-
-There are also two additional paths that don't require this SDK:
-- **Agent-first (MCP)** — drive Loxtep conversationally from Cursor, Kiro, Claude, etc. See [loxtep-plugins-skills](https://github.com/LoxtepInc/loxtep-plugins-skills).
-- **Web UI** — visual project setup and management at [app.loxtep.io](https://app.loxtep.io).
+| **Code-first CLI** | New project on Loxtep — scaffold, attach, author, deploy | `loxtep init → attach → generate → test → deploy` |
+| **Programmatic** | App code that reads/writes events or calls APIs | `LoxtepClient.fromWorkspace()` after login + attach |
+| **Agent-first (MCP)** | Conversational setup from your IDE | [loxtep-plugins-skills](https://github.com/LoxtepInc/loxtep-plugins-skills) |
+| **Web UI** | Visual project and workflow management | [app.loxtep.io](https://app.loxtep.io) |
 
-All paths are documented in the [Loxtep Quickstart](https://docs.loxtep.io/quickstart).
+All paths: [Loxtep Quickstart](https://docs.loxtep.io/quickstart).
 
 ---
 
-## Quick start — Programmatic (< 5 min to first stream)
+## Quick start — First run (recommended)
+
+Run these in an **empty directory** you want to turn into a Loxtep workspace.
 
 1. **Install**
 
@@ -57,124 +49,138 @@ All paths are documented in the [Loxtep Quickstart](https://docs.loxtep.io/quick
    pnpm add @loxtep/sdk
    ```
 
-2. **Log in**
+2. **Log in and confirm identity**
 
    ```bash
    pnpm exec loxtep login
+   pnpm exec loxtep whoami
    ```
 
-   A browser window opens — sign in to Loxtep and you're authenticated.
-   Tokens are saved to `./.loxtep/credentials.json` (use `--global` for home dir).
+   Tokens are saved to `./.loxtep/credentials.json` by default (use
+   `--global` for `~/.loxtep/credentials.json`).
 
-   > **CI/headless:** Use `pnpm exec loxtep login --email you@co.com --password ...`
-   > or set `LOXTEP_AUTH_TOKEN` in your environment.
+   > **CI/headless:** `pnpm exec loxtep login --email you@co.com --password …`
+   > or set `LOXTEP_AUTH_TOKEN`.
 
-3. **Create a client, write and read events**
+3. **Scaffold the workspace**
 
-   ```ts
-   import { LoxtepClient } from '@loxtep/sdk';
+   ```bash
+   pnpm exec loxtep init
+   # optional: pnpm exec loxtep init --template shopify-orders
+   ```
 
-   const client = new LoxtepClient({
-     api_url: 'https://api.loxtep.com',
-     auth: { type: 'jwt', token: process.env.LOXTEP_AUTH_TOKEN! },
-   });
+   Creates `.loxtep/project.json`, `workflows/`, `connectors/`, `domains/`,
+   and `data-products/`.
 
-   // Write events to a data product (top-level — resolves deployment metadata)
-   const writer = await client.get_writer('shopify_gql_customer');
-   writer.write({
-     customer_id: '123',
-     name: 'Alice',
-     email: 'alice@example.com',
-   });
-   await writer.close();
+4. **Attach to a runtime instance**
 
-   // Read events from a data product
-   const reader = await client.get_reader('shopify_gql_customer');
-   for await (const event of reader) {
-     console.log(event);
-   }
+   ```bash
+   pnpm exec loxtep instances list
+   pnpm exec loxtep attach --instance <instance-id>
    ```
 
-   That's it. The SDK resolves the data product's queue, bot identity, and
-   stream bus configuration automatically from the deployment metadata. No
-   manual queue names, no stream config, no bot IDs.
+   Writes `instance_id` and `api_url` into `.loxtep/project.json`. Required
+   before `generate`, `test`, and `deploy`.
 
-4. **Stream config from the platform (optional)** — after login,
-   `await client.observe.stream_config()` returns stream resource names
-   needed for the data plane. Merge into
-   `new LoxtepClient({ ...opts, streams: { ...partial } })` with your
-   JWT-backed client. `get_writer` / `get_reader` resolve stream config
-   automatically — this step is only needed for manual bus access via
-   `client.observe.open_reader()`.
+5. **Generate typed workspace constants**
 
----
+   ```bash
+   pnpm exec loxtep generate
+   ```
 
-## Quick start — Code-first CLI (init → deploy)
+   Emits `.loxtep/generated/index.ts` from live platform metadata.
 
-For developers who author workflows as TypeScript and want the full local-dev-to-production lifecycle, see the dedicated **[Code-first CLI guide](./docs/code-first-cli.md)**. Quick version:
+6. **See what's on the instance**
 
-```bash
-# 1. Install
-pnpm add @loxtep/sdk
+   ```bash
+   pnpm exec loxtep data-products list
+   pnpm exec loxtep workflows list --project-id <project-id-from-project.json>
+   ```
+
+   A brand-new org may have **no data products yet** — that's expected. Create
+   and deploy workflows (below, or via MCP/UI) before calling `get_writer`.
+
+7. **Author, test, and deploy** (when you're ready)
+
+   ```bash
+   pnpm exec loxtep test <module> --event ./events/sample.json
+   pnpm exec loxtep deploy
+   ```
 
-# 2. Authenticate
-pnpm exec loxtep login
+   See **[Code-first CLI guide](./docs/code-first-cli.md)** for workflow
+   modules and templates.
 
-# 3. Scaffold a project from a template
-pnpm exec loxtep init --template shopify-orders
+### Bootstrap the SDK from your workspace
 
-# 4. Bind to a runtime instance
-pnpm exec loxtep attach --instance prod
+After steps 1–4 above, application code can use auto-config — no hand-built
+client options:
 
-# 5. Generate typed workspace constants
-pnpm exec loxtep generate
+```ts
+import { LoxtepClient } from '@loxtep/sdk';
+
+const client = await LoxtepClient.fromWorkspace();
+const { user, organization } = await client.session.get_current_user();
+console.log(user.email, organization?.name);
+```
 
-# 6. Author a workflow (see authoring module docs below)
+### Write and read events (after deploy)
 
-# 7. Test locally with a sample event
-pnpm exec loxtep test orders-enricher --event ./events/order-created.json
+`get_writer` / `get_reader` resolve queue, bot, and stream config from
+**deployment metadata**. Use a name from `loxtep data-products list` after
+your workflow is deployed:
+
+```ts
+const client = await LoxtepClient.fromWorkspace();
+
+const writer = await client.get_writer('orders');
+writer.write({ order_id: '1', total: 42.0 });
+await writer.close();
 
-# 8. Deploy to the workflow engine
-pnpm exec loxtep deploy
+const reader = await client.get_reader('orders');
+for await (const event of reader) {
+  console.log(event);
+  break;
+}
 ```
 
-The `generate` step produces `.loxtep/generated/index.ts` with typed constants for every data product, connector, domain, and queue in your workspace. Import them in your workflow modules for compile-time safety:
+---
+
+## Quick start — Code-first workflow module
+
+After `init`, `attach`, and `generate`, import typed constants in workflow
+modules:
 
 ```ts
-import { defineDataWorkflow, on } from '@loxtep/sdk'
-import { workspace } from './.loxtep/generated'
+import { defineDataWorkflow, on } from '@loxtep/sdk';
+import { workspace } from './.loxtep/generated';
 
 export default defineDataWorkflow({
   name: 'orders-enricher',
-  triggers: [on.queueEvent(workspace.queues.orders_raw)],
-  async handler(ctx, event) {
-    await ctx.toolbox.dataProducts.upsert({
-      dataProduct: workspace.dataProducts.orders_enriched,
-      domain: workspace.domains.commerce,
-      record: event,
-    })
+  triggers: [on.webhook('/orders')],
+  async handler(_ctx, event) {
+    console.log('received', event);
   },
-})
+});
 ```
 
-See `loxtep init --help`, `loxtep attach --help`, etc. for all flags. The full CLI reference is in the [CLI reference](#cli-reference) section below.
+See `loxtep init --help`, `loxtep attach --help`, etc. CLI reference below.
 
 ---
 
 ## API surface
 
-Every method is `snake_case`. Use the **10 MCP-aligned facades** on
-`LoxtepClient` (see table at the top). Nested APIs keep descriptive names
-(`workflows`, `data_products`, `connectors`, …) under their facade.
+Every method is `snake_case`. APIs live on **namespaced areas** of
+`LoxtepClient` (see table at the top). Nested APIs use descriptive names
+(`workflows`, `data_products`, `connectors`, …) under each area.
 
 ### Top-level stream I/O (preferred)
 
 - **`get_writer(name_or_id)`** — write path; resolves queue, bot, stream config
 - **`get_reader(name_or_id)`** — async iterable read path
 - **`LoxtepClient.fromWorkspace()`** — construct from `.loxtep/project.json` +
-  `~/.loxtep/credentials.json` (env overrides: `LOXTEP_API_URL`, `LOXTEP_TOKEN`, …)
+  `./.loxtep/credentials.json` (env overrides: `LOXTEP_API_URL`, `LOXTEP_TOKEN`, …)
 
-### `client.build` (MCP: loxtep_build)
+### Build & deploy (`client.build`)
 
 - **`.workflows`** — `list`, `get`, `create`, `get_graph`, `deploy`; low-level
   `.get_writer(workflow_id, { bot_id, … })` escape hatch
@@ -184,30 +190,30 @@ Every method is `snake_case`. Use the **10 MCP-aligned facades** on
   `client.get_writer` / `get_reader`)
 - **`.targets`** — delivery sink bindings (`list`, `get`, `create`, `update`, `delete`)
 
-### `client.connect` (MCP: loxtep_connect)
+### Connect (`client.connect`)
 
 - **`.connectors`** — org-level connector credentials
 - **`.templates`** — starter templates (`list`, `get`, `apply_template` on projects)
 
-### `client.workspace` (MCP: loxtep_workspace)
+### Workspace (`client.workspace`)
 
 - **`.projects`** — `list`, `get`, `create`, `update`, `delete`, `apply_template`
 - **`.instances`** — `list`, `get`, stream config helpers
 
-### `client.define` (MCP: loxtep_define)
+### Governance (`client.define`)
 
 - **`.schemas`**, **`.quality`**, **`.standards`**, **`.data_contracts`**, **`.domains`**
 
-### `client.query` (MCP: loxtep_query)
+### Analytics (`client.query`)
 
 - **`.catalog`**, **`.discovery`**, **`.query()`**, **`.list_tables()`**, **`.search()`**
 
-### `client.observe` (MCP: loxtep_observe)
+### Observe (`client.observe`)
 
 - **`status()`**, **`stream_config()`**, **`open_reader()`**, **`open_writer()`**,
   **`get_queue_metadata()`**, **`get_reader_checkpoint()`**
 
-### Other facades
+### Authentication, semantics, review, and context
 
 - **`client.session`** — `get_current_user`, `get_current_organization`, `logout`
 - **`client.meaning`** — `.thesaurus.*`
@@ -215,8 +221,6 @@ Every method is `snake_case`. Use the **10 MCP-aligned facades** on
 - **`client.context`** — `.procedures.*`, `.activity.*`, `.process_intelligence.*`
 - **`client.metrics`** — `log`, `get_reporter` (stub until metrics wiring lands)
 
-See [`docs/sdk-mcp-mapping.md`](./docs/sdk-mcp-mapping.md) for the full MCP ↔ SDK table.
-
 ## Data product writer and reader
 
 `await client.get_writer('name')` resolves the data product's queue, bot
@@ -300,12 +304,11 @@ await client.build.targets.delete('dp_abc123', webhook.consumption_id);
 
 ## Documentation
 
-- **[Getting started](./docs/getting-started.md)** – Zero to first event in under 5 minutes (programmatic; no init).
+- **[Getting started](./docs/getting-started.md)** – Login, init, attach, generate — then stream I/O after deploy.
 - **[Code-first CLI](./docs/code-first-cli.md)** – `loxtep init`, attach, generate, test, deploy.
 - **[Quick reference](./docs/quick-reference.md)** – Single-page cheat sheet.
 - **[Event replay cookbook](./docs/event-replay-cookbook.md)** – Replay events from a data product or queue.
-- **[MCP + SDK pairing](./docs/sdk-pairing.md)** – One auth story, when MCP vs SDK.
-- **[MCP → SDK mapping](./docs/sdk-mcp-mapping.md)** – Agent-oriented table.
+- **[SDK + agent pairing](./docs/sdk-pairing.md)** – When to use the SDK vs IDE agent integrations.
 - **Typed errors** – `import { … } from '@loxtep/sdk/errors'`.
 - **API reference** – `pnpm run docs` (Typedoc).
 

package/dist/auth/browser-login.d.ts

@@ -12,6 +12,8 @@
  * 4. App redirects to our localhost callback with access_token + refresh_token
  * 5. Return tokens to caller, shut down server
  */
+import { type Server } from 'node:http';
+import type { Socket } from 'node:net';
 export interface BrowserLoginOptions {
     /** Loxtep app URL (e.g. https://app.loxtep.io or https://appdev.loxtep.io). */
     app_url: string;
@@ -21,6 +23,8 @@ export interface BrowserLoginOptions {
     timeout_ms?: number;
     /** If true, don't auto-open the browser — just print the URL. */
     no_open?: boolean;
+    /** For tests: invoked once the callback server is listening (with bound port). */
+    on_listening?: (port: number) => void;
 }
 export interface BrowserLoginResult {
     access_token: string;
@@ -33,6 +37,8 @@ export interface BrowserLoginResult {
         expiration: string;
     };
 }
+/** Force-close keep-alive sockets so the CLI process can exit immediately. */
+export declare function shutdownCallbackServer(server: Server, sockets: Set<Socket>): void;
 /**
  * Run the browser-based OAuth login flow.
  * Returns tokens on success, throws on timeout or failure.

package/dist/auth/browser-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-login.d.ts","sourceRoot":"","sources":["../../src/auth/browser-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAYD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwFtF"}
+{"version":3,"file":"browser-login.d.ts","sourceRoot":"","sources":["../../src/auth/browser-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAC;AACjG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAKvC,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kFAAkF;IAClF,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAID,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CASjF;AAmBD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAyGtF"}

package/dist/auth/browser-login.js

@@ -16,31 +16,65 @@ import { createServer } from 'node:http';
 import { URL } from 'node:url';
 import { exec } from 'node:child_process';
 import { platform } from 'node:os';
+const CLOSE_HEADERS = { Connection: 'close' };
+/** Force-close keep-alive sockets so the CLI process can exit immediately. */
+export function shutdownCallbackServer(server, sockets) {
+    for (const socket of sockets) {
+        socket.destroy();
+    }
+    sockets.clear();
+    const maybeCloseAll = server;
+    maybeCloseAll.closeAllConnections?.();
+    server.close();
+}
 /**
  * Open a URL in the user's default browser.
  */
 function openBrowser(url) {
     const os = platform();
     const cmd = os === 'darwin' ? 'open' : os === 'win32' ? 'start' : 'xdg-open';
-    exec(`${cmd} "${url}"`);
+    const child = exec(`${cmd} "${url}"`);
+    child.unref?.();
+}
+function finishResponse(res, body, status = 200) {
+    res.writeHead(status, { 'Content-Type': 'text/html', ...CLOSE_HEADERS });
+    res.end(body);
+    res.socket?.destroy();
 }
 /**
  * Run the browser-based OAuth login flow.
  * Returns tokens on success, throws on timeout or failure.
  */
 export function browserLogin(options) {
-    const { app_url, timeout_ms = 300_000, no_open = false } = options;
+    const { app_url, timeout_ms = 300_000, no_open = false, on_listening } = options;
     return new Promise((resolve, reject) => {
         let settled = false;
         let timeoutId;
+        const sockets = new Set();
+        const settleSuccess = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timeoutId)
+                clearTimeout(timeoutId);
+            shutdownCallbackServer(server, sockets);
+            resolve(result);
+        };
+        const settleFailure = (err) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timeoutId)
+                clearTimeout(timeoutId);
+            shutdownCallbackServer(server, sockets);
+            reject(err);
+        };
         const server = createServer((req, res) => {
             const reqUrl = new URL(req.url ?? '/', `http://localhost`);
             if (reqUrl.pathname === '/callback') {
-                // Tokens come as query params from the Loxtep app redirect
                 const access_token = reqUrl.searchParams.get('access_token');
                 const refresh_token = reqUrl.searchParams.get('refresh_token') ?? undefined;
                 const expires_at = reqUrl.searchParams.get('expires_at') ?? undefined;
-                // AWS credentials (optional, URL-encoded JSON)
                 let aws_credentials;
                 const awsCredsParam = reqUrl.searchParams.get('aws_credentials');
                 if (awsCredsParam) {
@@ -52,30 +86,31 @@ export function browserLogin(options) {
                     }
                 }
                 if (!access_token) {
-                    res.writeHead(400, { 'Content-Type': 'text/html' });
-                    res.end('<html><body><h2>Login failed</h2><p>No access token received. Close this window and try again.</p></body></html>');
+                    finishResponse(res, '<html><body><h2>Login failed</h2><p>No access token received. Close this window and try again.</p></body></html>', 400);
                     return;
                 }
-                res.writeHead(200, { 'Content-Type': 'text/html' });
-                res.end('<html><body><h2>Login successful!</h2><p>You can close this window and return to your terminal.</p></body></html>');
-                settled = true;
-                if (timeoutId)
-                    clearTimeout(timeoutId);
-                server.close();
-                resolve({ access_token, refresh_token, expires_at, aws_credentials });
+                finishResponse(res, '<html><body><h2>Login successful!</h2><p>You can close this window and return to your terminal.</p></body></html>');
+                settleSuccess({ access_token, refresh_token, expires_at, aws_credentials });
                 return;
             }
-            // Health check / catch-all
-            res.writeHead(200, { 'Content-Type': 'text/plain' });
+            res.writeHead(200, { 'Content-Type': 'text/plain', ...CLOSE_HEADERS });
             res.end('Loxtep SDK login callback server');
+            res.socket?.destroy();
+        });
+        server.on('connection', socket => {
+            sockets.add(socket);
+            socket.on('close', () => {
+                sockets.delete(socket);
+            });
         });
         server.listen(0, '127.0.0.1', () => {
             const addr = server.address();
             if (!addr || typeof addr === 'string') {
-                reject(new Error('Failed to start callback server'));
+                settleFailure(new Error('Failed to start callback server'));
                 return;
             }
             const port = addr.port;
+            on_listening?.(port);
             const callbackUrl = `http://localhost:${port}/callback`;
             const loginUrl = `${app_url.replace(/\/$/, '')}/auth/mcp?callback_url=${encodeURIComponent(callbackUrl)}`;
             if (no_open) {
@@ -89,19 +124,12 @@ export function browserLogin(options) {
             console.log('Waiting for login to complete...');
         });
         server.on('error', err => {
-            if (!settled) {
-                settled = true;
-                reject(new Error(`Callback server error: ${err.message}`));
-            }
+            settleFailure(new Error(`Callback server error: ${err.message}`));
         });
-        // Timeout
         timeoutId = setTimeout(() => {
-            if (!settled) {
-                settled = true;
-                server.close();
-                reject(new Error(`Login timed out after ${timeout_ms / 1000} seconds. Try again.`));
-            }
+            settleFailure(new Error(`Login timed out after ${timeout_ms / 1000} seconds. Try again.`));
         }, timeout_ms);
+        timeoutId.unref?.();
     });
 }
 //# sourceMappingURL=browser-login.js.map

package/dist/auth/browser-login.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-login.js","sourceRoot":"","sources":["../../src/auth/browser-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAyBnC;;GAEG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,MAAM,GAAG,GACP,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACnE,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAEnE,OAAO,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAoD,CAAC;QAEzD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;YACxE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAE3D,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACpC,2DAA2D;gBAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAC7D,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;gBAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;gBAEtE,+CAA+C;gBAC/C,IAAI,eAAkE,CAAC;gBACvE,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBACjE,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC;wBACH,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;oBAClE,CAAC;oBAAC,MAAM,CAAC;wBACP,sBAAsB;oBACxB,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,kHAAkH,CAAC,CAAC;oBAC5H,OAAO;gBACT,CAAC;gBAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CACL,mHAAmH,CACpH,CAAC;gBAEF,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YAED,2BAA2B;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;YACxD,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;YAE1G,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,mDAAmD,QAAQ,IAAI,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,4CAA4C,QAAQ,IAAI,CAAC,CAAC;gBACtE,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;gBACzF,WAAW,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;YACvB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,UAAU;QACV,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,UAAU,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC;YACtF,CAAC;QACH,CAAC,EAAE,UAAU,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"browser-login.js","sourceRoot":"","sources":["../../src/auth/browser-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAEjG,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AA2BnC,MAAM,aAAa,GAAG,EAAE,UAAU,EAAE,OAAgB,EAAE,CAAC;AAEvD,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,OAAoB;IACzE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhB,MAAM,aAAa,GAAG,MAAuD,CAAC;IAC9E,aAAa,CAAC,mBAAmB,EAAE,EAAE,CAAC;IACtC,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,MAAM,GAAG,GACP,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IACnE,MAAM,KAAK,GAAiB,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;IACpD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,GAAmB,EAAE,IAAY,EAAE,MAAM,GAAG,GAAG;IACrE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;IACzE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACd,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,EAAE,OAAO,GAAG,KAAK,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAEjF,OAAO,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAoD,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,MAAM,aAAa,GAAG,CAAC,MAA0B,EAAQ,EAAE;YACzD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,CAAC,GAAU,EAAQ,EAAE;YACzC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;YACxE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAE3D,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACpC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAC7D,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;gBAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;gBAEtE,IAAI,eAAkE,CAAC;gBACvE,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;gBACjE,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC;wBACH,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;oBAClE,CAAC;oBAAC,MAAM,CAAC;wBACP,sBAAsB;oBACxB,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,cAAc,CACZ,GAAG,EACH,kHAAkH,EAClH,GAAG,CACJ,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,cAAc,CACZ,GAAG,EACH,mHAAmH,CACpH,CAAC;gBAEF,aAAa,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;YACvE,GAAG,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;YAC5C,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE;YAC/B,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,aAAa,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;YAErB,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;YACxD,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;YAE1G,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,mDAAmD,QAAQ,IAAI,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,4CAA4C,QAAQ,IAAI,CAAC,CAAC;gBACtE,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;gBACzF,WAAW,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;YACvB,aAAa,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,aAAa,CAAC,IAAI,KAAK,CAAC,yBAAyB,UAAU,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC;QAC7F,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/deploy-cmd.d.ts

@@ -82,6 +82,8 @@ export declare function validateReferencedResources(compiledModules: Array<{
 export interface DeployCommandOptions {
     /** Working directory (defaults to process.cwd()). */
     cwd?: string;
+    /** Mock fetch / config paths for integration tests. */
+    cliOptions?: import('../create-cli-client.js').CreateCliClientOptions;
 }
 /**
  * Execute the `loxtep deploy` command.

package/dist/cli/commands/deploy-cmd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy-cmd.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/deploy-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EAAE,gBAAgB,EAAe,MAAM,6BAA6B,CAAC;AAGjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAMhE,4CAA4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qDAAqD;AACrD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,YAAY,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,YAAY,EAAE,UAAU,CAAA;CAAE,CAAC;AAE9D,4CAA4C;AAC5C,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAYjG;AAwBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,YAAY,CAgBpE;AAMD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,eAAe,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EACpE,GAAG,EAAE,iBAAiB,GACrB,eAAe,EAAE,CA2CnB;AAiFD,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,SAAS,CAAC,CA0Q7F;AAED;;;GAGG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAW/C"}
+{"version":3,"file":"deploy-cmd.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/deploy-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EAAE,gBAAgB,EAAe,MAAM,6BAA6B,CAAC;AAGjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAMhE,4CAA4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,yDAAyD;AACzD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,qDAAqD;AACrD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,YAAY,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,YAAY,EAAE,UAAU,CAAA;CAAE,CAAC;AAE9D,4CAA4C;AAC5C,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAYjG;AAwBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,YAAY,CAgBpE;AAMD;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,eAAe,EAAE,KAAK,CAAC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EACpE,GAAG,EAAE,iBAAiB,GACrB,eAAe,EAAE,CA2CnB;AAiFD,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,UAAU,CAAC,EAAE,OAAO,yBAAyB,EAAE,sBAAsB,CAAC;CACvE;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,SAAS,CAAC,CA0Q7F;AAED;;;GAGG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAW/C"}

package/dist/cli/commands/deploy-cmd.js

@@ -213,7 +213,7 @@ export async function runDeployCommand(options = {}) {
     const { projectDir, project } = precondition;
     const { project_id: projectId, instance_id: instanceId } = project;
     // 2. Get an authenticated client
-    const clientResult = await requireCliClient();
+    const clientResult = await requireCliClient(options.cliOptions);
     const { client } = clientResult;
     // 3. Load workspace context (needed for compilation and validation)
     let context;